Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
File:                     323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa (raw, json)
Hash identifier:          VVU71Hnw+U0NOrAFi9GH7x4LW6Vfa3W65WyghbO54ao=
Subject key identifier:   8D:9E:B6:82:C7:22:24:CD:C5:96:DF:48:15:4D:65:17:7C:6A:93:6C
Certificate issuer:       /CN=1EA7572730570E0D627708051828C84C8111A53E
Certificate serial:       4980477E81B1B10A0C97193998A0C74E77F6A658
Authority key identifier: 1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa
Signing time:             Tue 04 Feb 2025 18:15:07 +0000
ROA not before:           Tue 04 Feb 2025 18:10:07 +0000
ROA not after:            Tue 03 Feb 2026 18:15:07 +0000
asID:                     271903
IP address blocks:        2803:5be0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:80:47:7e:81:b1:b1:0a:0c:97:19:39:98:a0:c7:4e:77:f6:a6:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EA7572730570E0D627708051828C84C8111A53E
        Validity
            Not Before: Feb  4 18:10:07 2025 GMT
            Not After : Feb  3 18:15:07 2026 GMT
        Subject: CN=8D9EB682C72224CDC596DF48154D65177C6A936C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8b:93:c2:35:12:68:07:c6:cb:ac:69:b1:1d:
                    cf:68:bc:83:29:3f:02:1b:7c:ee:34:b5:9a:f9:92:
                    a3:ef:ff:7a:cd:f5:b7:28:4a:1f:fb:33:2a:ef:48:
                    40:46:4c:67:b9:75:70:93:95:c1:c5:45:5f:7b:14:
                    f0:73:32:c9:9b:c6:70:62:33:7e:78:90:23:e1:7c:
                    06:91:00:c6:65:7c:16:76:be:4b:29:c4:28:0b:e8:
                    b3:e2:a2:52:22:33:2a:ec:e0:00:55:e8:52:8c:a6:
                    5a:ab:9a:c6:0e:dd:e6:41:5c:b8:22:d8:ad:d0:68:
                    0b:41:88:80:19:cc:9f:c9:14:0c:32:d8:d5:4c:05:
                    04:72:eb:b1:5e:e2:c2:fe:38:02:7f:1e:c6:df:60:
                    13:d2:ee:a8:ab:ca:fb:f2:89:b7:c5:d6:5c:84:86:
                    4e:fb:a2:f8:e2:7c:bf:ac:b1:e1:20:e2:0e:85:db:
                    22:ce:cd:0e:8c:e0:76:55:22:a9:0f:d0:66:83:6f:
                    ae:11:a5:75:eb:1c:66:74:43:64:5c:94:94:c3:8f:
                    96:39:16:1f:ab:5c:6e:5c:21:f0:f3:69:91:8a:c3:
                    d3:a1:98:8a:26:bf:00:8b:40:71:0e:b8:24:02:60:
                    d8:62:4f:1f:4b:68:99:fd:6e:3d:80:c1:4e:ad:bd:
                    ce:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:B6:82:C7:22:24:CD:C5:96:DF:48:15:4D:65:17:7C:6A:93:6C
            X509v3 Authority Key Identifier:
                keyid:1E:A7:57:27:30:57:0E:0D:62:77:08:05:18:28:C8:4C:81:11:A5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/1EA7572730570E0D627708051828C84C8111A53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EA7572730570E0D627708051828C84C8111A53E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58F605DDA863EA0C5B2FD9640006BAD418E898C6BB64F62C2DF6F7A2BAE69C58/0/323830333a356265303a3130303a3a2f34302d3430203d3e20323731393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5be0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b8:0a:98:6d:b9:18:39:68:54:4f:93:b1:3e:12:cc:81:83:30:
         00:c5:0b:bb:1e:c2:e2:4b:e5:01:f5:1a:69:82:67:a3:94:27:
         5f:66:58:5c:c2:ac:ae:18:1e:2c:66:a5:3a:9e:d7:c0:20:c9:
         51:b3:47:5a:81:eb:d3:aa:5f:24:91:5e:4a:81:bf:70:9c:ad:
         22:d8:44:8b:4a:23:49:d0:53:5c:44:a9:8d:2f:f3:13:98:fe:
         02:b8:d4:8f:c6:07:4e:39:d0:29:5a:6f:dc:93:aa:44:47:e8:
         cd:28:41:a0:0e:e5:22:4b:97:65:ec:b0:52:fc:63:35:7d:12:
         e1:0e:99:f7:12:63:7b:47:64:35:84:e6:d0:b4:2c:5d:4b:87:
         52:4d:d8:e0:0e:05:24:54:7d:ba:78:74:d1:10:56:eb:46:c3:
         a9:a9:6a:36:dc:af:49:e1:66:05:61:f5:40:be:60:38:99:b2:
         3d:36:f9:97:83:0c:61:7f:46:eb:04:25:5a:fe:7f:99:82:99:
         0d:2d:11:24:4a:31:f6:9d:15:b9:0e:a5:cd:5b:50:ea:f4:da:
         a8:bf:8c:f0:d8:f5:e4:4c:96:09:df:17:b2:da:90:af:46:91:
         6d:7b:b4:26:47:dd:b7:fb:df:82:79:6a:8b:8e:07:05:55:33:
         38:01:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:37:30 2025 by rpki-client